What does the COSO Enterprise Risk Management (ERM) framework emphasize?

What does the COSO Enterprise Risk Management (ERM) framework emphasize?

• A. A simple risk checklist used by management.
• B. A framework that focuses only on financial risk.
• C. The culture, capabilities and practices, integrated with strategy-setting and performance, that organizations rely on to manage risk in creating, preserving and realizing value.
• D. An isolated auditing standard unrelated to strategy.

Answer: (C)

COSO ERM emphasizes an integrated, value-driven approach to risk management that is embedded in how an organization sets strategy and manages performance. It focuses on the culture, capabilities, and practices that shape how risk is identified, assessed, and mitigated across the enterprise, with the aim of creating, preserving, and realizing value. This broader view goes beyond mere compliance or financial risk, and it’s not about a standalone auditing standard; it’s about how risk management becomes part of everyday decision making and strategy execution, influencing objectives and outcomes.

COSO ERM emphasizes an integrated, value-driven approach to risk management that is embedded in how an organization sets strategy and manages performance. It focuses on the culture, capabilities, and practices that shape how risk is identified, assessed, and mitigated across the enterprise, with the aim of creating, preserving, and realizing value. This broader view goes beyond mere compliance or financial risk, and it’s not about a standalone auditing standard; it’s about how risk management becomes part of everyday decision making and strategy execution, influencing objectives and outcomes.